← Trust
Sub-processors and hosting
Praxis · MarketGraphs · trust · document 11
The companies that process data on our instructions, and how the server is run.
| Company | What it does for us | Where |
|---|---|---|
| Hetzner Online GmbH | Server and database | Germany |
| Cloudflare, Inc. | File storage and encrypted backups | European Union, Eastern Europe region. A United States company |
| WorkOS, Inc. | Sign-in for Praxis accounts | United States |
| Amazon Web Services | Runs the AI models that read paper text | London region |
| Netlify, Inc. | Website hosting | United States |
| Beehiiv Inc. | Newsletter | United States |
| Stripe | Payments | Ireland and United States |
| Resend, Inc. | Account and purchase emails | United States |
Hosting
- One server at Hetzner Online GmbH in Germany, in data centres certified to ISO 27001.
- Traffic over HTTPS with TLS (Transport Layer Security) 1.2 or newer and HTTP Strict Transport Security (HSTS). Sign-in through WorkOS, no passwords held.
- Administration over SSH (secure shell) with keys only. One operator, the founder. No shared accounts.
- Operating-system security updates applied automatically. Firewall open on ports 22, 80 and 443 only.
- An encrypted copy of the database goes nightly to Cloudflare object storage in the European Union, 7 daily and 4 weekly copies kept, restore tested monthly. At most 24 hours of data can be lost in a restore.
- Every file on the server is listed in a manifest in the repository and checked against it.
- Each processor applies its standard data processing agreement. Transfers outside the United Kingdom rest on the UK's standard data transfer terms or the UK-US data bridge. Copies on request.